Defining Translation Timeouts - Juniper JUNOSE 11.0.X IP SERVICES Configuration Manual

JUNOSe 11.0.x IP Services Configuration Guide
ip nat outside source list

Defining Translation Timeouts

The router removes unused dynamic translations in the translation table. Use the ip
nat translation command to change or disable NAT translation timeouts.
You can set the aging time (in seconds) never) for any of the specified timers:
All timeouts for this command support a maximum value of 2147483 seconds (about
25 days).
The no version of this command resets the timer to its default value.
ip nat translation
78
Defining Dynamic Translations
Use to create dynamic translation rules that specify when to create a translation
for a source address when routing a packet from the outside network to the
inside network.
Example
host (config) # ip nat outside source list translation1 pool pool1
Use the no version to remove the dynamic translation rule; this command does
not remove any dynamic translations from the translation table.
See ip nat outside source list.
timeout Dynamic simple translations (not for overloaded translations); default
is 86400 seconds (24 hours).
dns-timeout DNS-created protocol translations; default is 120 seconds. These
dynamic translations are installed by the DNS but not yet used; as soon as the
translation is used, the router applies the timeout value mentioned above.
udp-timeout UDP protocol extended translations; default is 300 seconds (5
minutes).
tcp-timeout TCP protocol extended translations; default is 86400 seconds (24
hours).
finrst-timeout TCP connections terminated with reset (RST) or bidirectional
finished (FIN) flags; default is 120 seconds. This timeout applies only to TCP
extended translations. The timer removes unused, closed TCP translations, which
allows for retransmissions.
icmp-timeout ICMP protocol extended translations; default is 300 seconds (5
minutes).
gre-timeout Aging time for GRE protocol translations; default value is 300
seconds (5 minutes)